lkml.org 
[lkml]   [2001]   [Aug]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] let Net Devices feed Entropy, updated (1/2)
    Mike Touloumtzis wrote:

    > You have been repeating that there is no difference in security
    > between /dev/random and /dev/urandom, but consider this: you install
    > a kernel/hardware combination without any registered SA_SAMPLE_RANDOM
    > IRQs (i.e. headless, no IDE, no NICs with SA_SAMPLE_RANDOM IRQs).
    > This configuration is not hard to imagine for, say, a dedicated
    > server appliance or embedded device.

    So we then have two options, one of which is required if we are going to be able
    to get any random numbers from this box:

    1) if we contact some server to boot or to mount filesystems, we can also slurp
    up some seed values from that server.
    2) we enable all NIC drivers to collect entropy

    In the case you describe, I don't see any other options. Without one of these
    paths, /dev/random will block, and /dev/urandom will be predictable.

    Chris

    --
    Chris Friesen | MailStop: 043/33/F10
    Nortel Networks | work: (613) 765-0557
    3500 Carling Avenue | fax: (613) 765-2986
    Nepean, ON K2H 8E9 Canada | email: cfriesen@nortelnetworks.com
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 12:57    [W:4.251 / U:0.332 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site